[QUOTE=rogue;491329]On vacation, sitting in Costa Rica near Monteverde, enjoying the view. Better yet, the kids are having a lot of fun.[/QUOTE]
I am "green" with envy. :smile: Please enjoy to the utmost! Happiest wishes for you and your clan.

Wireless AP tricks...
 

I had a bit of fun last week which I thought I'd share, as some might find it funny, and others an useful idea...

I was at my girlfriends office, and noticed that their ISP's CPE had its wireless turned on. I had told them not to turn it on unless absolutely necessary (for example, someone visiting to do a presentation), and to turn it off again as soon as they no longer need it. But they'd turned it on and then forgotten to turn it off.

The reason for this paranoia is you just never know when a "zero day" against Winblows might be leveraged by someone who has the access credentials. Heck, someone's smart phone might have malware doing this kind of thing without the owner even knowing about it. Further, the ISP's CPE can't firewall the wireless segment to only access the internet; the LAN is also routable.

So, I configured a dedicated wireless Access Point (AP), and configured it to have three SSIDs. One called "Architects Cubed" which broadcasts its SSID and doesn't require a password (read: it's open). And then two others which are "hidden", require passwords, and are WPA2 encrypted. All of these are mapped into separate subnets and VLANs, and are wired from the AP to a dedicated NIC in a Linux server.

I then set up iptables rules to allow the two hidden SSIDs to access the Internet, but not the LAN. For the open SSID I allowed DNS traffic to 8.8.8.8 and 8.8.4.4 (what the DHCP server assigns), and remapped all HTTP requests to the [URL="https://www.architectscubed.com/"]Architects Cubed website[/URL]. Everything else is logged and then dropped.

The end result: people who happen to be around their office (a lot of tourists walk by to get to a very nice nearby beach) think they've found an open WiFi hotspot, and when they try to "What's App" etc. they end up on Architects Cubed website. They can spend all day surfing around the site, but can't go anywhere else.

Heck, if someone's going to try to steal their internet, they'd might as well get a bit of advertising out of it.... :wink:

"hidden" SSIDs are a bad idea, IMHO. Anyone who knows how to sniff packets will see them, and then it forces every client to actively ping for them when they're not associated to a network, thus draining phone batteries faster.

[QUOTE=Mark Rose;491932]"hidden" SSIDs are a bad idea, IMHO.[/QUOTE]

Thanks for the feedback, but in this particular application I don't think it's an issue.

Even if the connection is compromised, the attacker has access to absolutely nothing inside the office (except the internet connection). And, frankly, my girlfriend's employees' smart phone battery usage is not my problem....

Edit: Oh, also... Based on how many mobile devices the AP is detecting as they drive by (logged by way of SNMP Traps (giving away their device names, MAC addresses, and sometimes even their phone numbers(!))) many (if not most) devices are nominally busy radiating away anyway.

#6
 

Grandbaby #6 born today...a girl!!!!

[QUOTE=petrw1;492331]Grandbaby #6 born today...a girl!!!![/QUOTE]
Congratulations! :smile:

We bought a new motorcycle 80 days ago.

Today we crossed 25,000 miles. (Around the World in Eighty Days?)

(Here is our fuel log: [url]http://www.mersenneforum.org/png/MPG.PNG[/url])

:mike:

[QUOTE=Xyzzy;494648]We bought a new motorcycle 80 days ago.

Today we crossed 25,000 miles. (Around the World in Eighty Days?)

(Here is our fuel log: [url]http://www.mersenneforum.org/png/MPG.PNG[/url])

:mike:[/QUOTE]

You average 300 miles per day? Holy hemorrhoids, Bat-man!

I'm about to finish my 1st Cat 1 LL test. It's a 1st time test, not a doublecheck. The exponent has a lot of 1's.

M81111211: [url]https://www.mersenne.org/report_exponent/?exp_lo=81111211&full=1[/url]

[QUOTE=ewmayer;494650]You average 300 miles per day? Holy hemorrhoids, Bat-man![/QUOTE]

Took over 4 years but my Prius has 100,000Km.
Lifetime average of 50MPG or 5.66L/100Km (Highway/City/Summer/Winter combined)

[QUOTE=petrw1;494729]Took over 4 years but my Prius has 100,000Km.
Lifetime average of 50MPG or 5.66L/100Km (Highway/City/Summer/Winter combined)[/QUOTE]

Try closer to 4.7 L/100km ... you did the math as ~41.6 MPG